8729 matches found
CVE-2005-2639
Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...
slocate file search utility DoS
updatedb fails to handle long directory paths...
CVE-2005-2499: Undefined Security Weakness
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...
CA CAM log_security() Stack Buffer Overflow (Win32)
This module exploits a vulnerability in the CA CAM service by passing a long parameter to the logsecurity function. The CAM service is part of TNG Unicenter. This module has been tested on Unicenter v3.1. Module Options msf use exploit/windows/unicenter/cam/logsecurity msf undefinedlogsecurity sh...
CVE-2004-2463
CVE-2004-2463 affects ADA Image Server (ImgSvr) 0.4. A buffer overflow in the server allows remote attackers to cause a web server crash (denial of service) or execute arbitrary code via a long GET request. The connected records corroborate the long-GET-triggered overflow as the root issue and th...
CVE-2004-2466: Improper Restriction of Operations within the Bounds of a Memory Buffer
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...
CVE-2004-2432: Undefined Security Weakness
WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service crash via a request for a file with a long file name, possibly due to an off-by-one buffer overflow...
CVE-2004-2422: Undefined Security Weakness
Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service crash via 1 a long sender field to the Queue Manager or 2 a long To field to the Web Messaging component...
CVE-2004-2384
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...
CVE-2004-2370: Undefined Security Weakness
Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name...
CVE-2004-2367: Undefined Security Weakness
The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of service crash via a long FTP command...
CVE-2004-2384: Undefined Security Weakness
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service crash by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line...
CVE-2005-2546
Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long 1 username or 2 password, which reveals the path in an error message when the undefined "errmsg" function is called...
CVE-2002-2118
Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL...
CVE-2001-1575: Undefined Security Weakness
Apple Personal Web Sharing PWS 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow...
CVE-2002-2118: Undefined Security Weakness
Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL...
CVE-2005-2376
Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via a long 1 nickname or 2 chat message...
security flaw
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...
CVE-2004-2227: Undefined Security Weakness
Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions...